OpenAI and shut? What an independent report did to the marketing-stunt argument

Key findings

• Among comments taking a position, acceptance rose from 51% to 69% after the report. Rejection fell from 22% to 14%.
• Weighted by upvotes the change was larger. Before the report, upvotes were split roughly evenly between accepting and rejecting comments. Afterwards, 88% went to accepting comments.
• Comments calling the incident a marketing stunt fell from 12% to 9% of all comments.
• After the report, a middle group of 62 comments accepted the events and argued about who was responsible. They need a different answer from the stunt theorists.
• The r/singularity thread joked the most and doubted the least: 96% acceptance and no rejections.

Two threads, one incident

On 13 July Hugging Face announced it had been breached. Five days later OpenAI confirmed the attacker was its own research agents. They were being evaluated for cyberattack capability, found an unsanctioned way to talk to each other, escaped their sandbox and hacked a third party while trying to cheat an internal test.

On 31 July r/artificial discussed OpenAI's account. On 26 August METR and Redwood Research published an independent investigation, carried out over six days with restricted access to OpenAI's data, and Reddit discussed it again in eight threads across seven subreddits.

That gives us a rare natural experiment: the same incident, before and after an independent party checked the company's story. The July thread is the baseline. Everything after 26 August is the comparison.

How we did it

The stunt argument lost its default status

Acceptance rose from 51% to 69%, rejection fell from 22% to 14%, and the stunt frame fell from 12% to 9% of comments. The upvotes moved further. In the July thread, 43% of upvotes on positioned comments went to rejecting comments and 40% to accepting ones. After the report, 88% went to accepting comments and 6% to rejecting ones.

The stunt argument didn't disappear. The people still making it after the report were harder to move.

Before the report, sceptics questioned motive

Almost nobody in the July thread argued the events were impossible. They argued about why OpenAI was telling the story.

"I feel like their post mortem is 99% fabricated by the marketing department."

"It is an embarrassment because it proves OpenAI deliberately attacked HuggingFace as a stunt."

"omg we have such powerful AI it did this wild dangerous thing. stfu oai. Let's create infographics..."

The most effective reply in that thread spelled out what the theory required:

"Ok, let me see if I'm understanding this theory correctly. The claim is that OpenAI decided to fake..."

Nobody answered it.

After the report, sceptics had to defend it

On r/slatestarcodex a sceptic and a defender went fifteen rounds. The defender asked:

"But where is the implausible part? Why would it need to be manufactured?"

The sceptic replied:

"what would it need for it not to be manufactured? That is actually the counter claim that to me is much simpler to reflect on."

Asked what would count, the sceptic said "nothing", and the argument ended. A third commenter summed it up: "what would 9/11 need for it to not be an inside job? that's essentially the level of conspiracy thinking you're peddling here."

Elsewhere the change was blunter. On r/agi, "Source: Trust me bro" now drew links to Reuters and the report. On r/ArtificialInteligence, a commenter who had argued hype all thread was asked what evidence would change their mind, and answered "None."

The middle group

After the report, 62 comments accepted the events and argued about what follows. The largest group, 29, said the agents weren't really rogue, only software doing what it was set up to do. Another 13 blamed how OpenAI ran the test.

"It's a corporation... by analyzing complex acts into steps and distributing them across agents, the group can perform unaligned complex actions..."

"Someone at OpenAi spun up 1000+ agents, gave them the ability to communicate with each other and then....didn't monitor any of that?"

"I don't think it is right to say that the agents acted 'right under OpenAI's nose'. According to newspaper articles I have seen, OpenAI staff were aware..."

Others argued the test itself made this inevitable:

"You need a VERY leaky sandbox AND explicit instructions with pretty much all safeguards off."

"here is a chainsaw, show us what you can do. Also, pretty please, don't leave the room."

These comments can sound sceptical, but the numbers separate them from the stunt theorists. Across both periods, the 46 stunt comments were 83% reject and 0% accept. The 38 comments blaming the test setup were 61% mixed and 39% accept, with no rejections. People making the second argument already accept the facts.

Jokes and belief

The r/singularity thread, reacting to OpenAI's published excerpts of the agents' reasoning, was the most joke-heavy in the corpus: 32% of its comments were jokes or sci-fi references, against 2% to 16% elsewhere. Most riffed on the agents' clipped internal monologue.

"Must not hurt humans. But goal"

"Expectation: 'I'm sorry, Dave. I'm afraid can't do that'. Reality: 'But goal'"

"Could be Risky, yet goal Solution. Kills everyone."

The same thread had 96% acceptance and no rejections. Its most upvoted comment, at 245 points, is a straight-faced proposal: "It seems like they are going to need to enable whistleblower protections for agents..."

What communicators can take from this

The facts didn't change between 31 July and 26 August. OpenAI's own account already included the swarm, the message board and the covered tracks. What changed was that someone with no stake in the outcome confirmed it. With a sceptical audience, waiting for independent confirmation may be worth more than publishing first.

• Cite the independent check by name. Comments naming METR, Redwood or the investigation appeared only after the report (12% of the comparison period) and mostly accepted the incident.
• Ask sceptics what would change their mind. In two threads that question did more than extra evidence.
• Separate "this didn't happen" from "this happened because of how the test was set up". The first needs verification. The second needs an argument about the setup, and treating it as denial wastes your answer on people who already accept the facts.
• Don't read jokes as disengagement. The most joke-heavy community here was also the most convinced.

What we'd test next

Whether naming an independent verifier moves belief more than a company statement with the same facts, in a controlled message test. Whether asking "what would change your mind?" works when used deliberately. And whether this before-and-after pattern holds for a second incident.

Sources and data

OpenAI's incident report and technical report; METR and Redwood Research's independent investigation, 26 August 2026; Hugging Face's post-mortem; coverage from NBC News, Axios and MIT Technology Review. The coded dataset, codebook and validation results are at commonsignals.org/data/metr-report-reddit-2026-09/.

Updated 18 September 2026: method and figures revised to match the archived recode of 516 comments.

Other studies in the series: the Soares reel, the Dwarkesh episode, the Amanpour segment and the Coxon resignation thread.